CVE-2022-47732
HIGHYeastar N412/N824 Config Pnl 42.x/45.x - Info Disclosure
Title source: llmDescription
In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.
Scores
CVSS v3
7.5
EPSS
0.0017
EPSS Percentile
37.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-916
Status
published
Products (2)
yeastar/n412_firmware
yeastar/n824_firmware
Published
Jan 20, 2023
Tracked Since
Feb 18, 2026